This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          faNejbJtY+6Hp6wdNnFJwRkVMzJJpNo3Cvbj/7DmBMg=
Subject key identifier:   8E:5E:33:B8:EC:F9:5B:74:B4:00:50:22:27:4C:9A:04:28:79:72:A2
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019B5AF664AAE751E60D08FE0B015C92282A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          1057
Signing time:             Fri 26 Dec 2025 14:00:55 +0000
Manifest this update:     Fri 26 Dec 2025 14:00:55 +0000
Manifest next update:     Sat 27 Dec 2025 14:00:55 +0000
Files and hashes:         1: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          2: D6YciS_w4aBGgTwchVv0zjl3KM8.roa (hash: 0I0L8dvu+mXVyzn+otu0YMQ4J1Sqc+LW0CCIWiAWR+s=)
                          3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: OslXs+8+MLTmzilvl+p0M+x2bgY52VXTVa/wUkJ/HFs=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 11:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:f6:64:aa:e7:51:e6:0d:08:fe:0b:01:5c:92:28:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Dec 26 14:00:55 2025 GMT
            Not After : Dec 27 14:00:55 2025 GMT
        Subject: CN=8e5e33b8ecf95b74b4005022274c9a04287972a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:6a:84:05:79:95:10:ba:84:8d:27:5a:ae:
                    ea:58:fc:4e:86:00:82:90:1a:7c:be:37:78:9b:c4:
                    32:07:96:f6:60:31:59:f2:10:77:27:eb:06:74:bc:
                    88:45:3b:7b:cf:d0:81:cb:c8:18:80:77:01:e1:52:
                    5b:87:46:bb:1f:09:db:19:e2:a7:9d:f1:12:f5:77:
                    1a:96:1d:e9:6d:70:b0:06:94:ca:9f:c1:ad:83:bc:
                    db:b0:75:6f:eb:5f:8e:1a:37:c4:7c:28:5f:a8:28:
                    14:5a:c0:f6:b3:fe:b2:13:a5:c0:fd:bb:9f:74:00:
                    00:25:cf:b3:c6:a7:38:0e:6a:89:66:36:fe:09:0c:
                    3e:05:61:0c:6e:97:30:44:ee:83:0a:34:03:fc:b7:
                    b0:42:98:07:de:8d:76:8d:81:a1:3d:d8:68:9d:70:
                    81:23:4f:31:95:39:88:31:f0:42:b1:bb:70:04:b5:
                    a3:4c:d9:79:0b:12:d1:36:ad:9a:68:dd:44:52:9b:
                    3b:70:5b:c7:24:5e:e8:d4:28:8a:ef:85:9f:85:4d:
                    db:18:aa:31:c9:31:15:ee:34:55:6c:bd:28:19:d8:
                    80:cd:e7:bf:91:d7:f5:29:35:1e:42:18:3e:8d:91:
                    fb:9b:24:99:3d:bf:9d:c3:7f:b9:3f:52:ca:ca:d1:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5E:33:B8:EC:F9:5B:74:B4:00:50:22:27:4C:9A:04:28:79:72:A2
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:9b:1b:b2:48:65:15:11:b7:42:a5:7a:9e:9b:84:af:4b:
         37:7a:6c:6a:00:f1:da:eb:a8:e0:b3:85:7f:00:2e:97:ef:2d:
         ea:95:ee:b0:3e:ee:3e:4f:99:81:28:3d:80:48:af:98:2c:ac:
         fd:54:52:37:38:4b:7f:f5:5b:5f:1f:e6:67:31:1a:6d:38:d9:
         cc:d3:99:79:d0:ba:64:4a:5b:17:59:86:9c:80:f8:66:8e:b8:
         f2:8e:9c:83:c7:5e:82:80:17:c2:9d:4c:b1:66:9c:ed:0a:b7:
         18:a5:1e:96:d7:7a:2d:7b:ea:00:dd:37:f2:f2:8f:94:49:15:
         00:a7:26:a4:e5:fa:fe:e8:02:14:cd:52:71:09:7e:9f:2e:26:
         83:25:7c:6d:95:b8:4b:02:56:66:0f:21:e0:c3:13:14:51:aa:
         a2:eb:18:a2:38:3b:2f:f1:3c:2e:1f:ef:ea:51:6b:1e:f7:3f:
         67:61:b0:d2:b3:02:3b:9e:2e:dd:30:05:20:3d:df:5b:a8:98:
         3b:ed:15:e0:fb:7a:25:92:04:c6:fc:b7:c7:4d:28:1d:81:87:
         98:b4:57:39:b5:c4:b5:7f:1e:ba:9e:94:9d:8d:4c:07:13:df:
         5f:8d:03:42:94:c2:ff:a7:20:75:8a:1c:01:2b:ac:30:08:bb:
         7d:00:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 21:02:40 2025 by rpki-client